Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: JOWk3l8p/b1/rvFp8PGqMnrYCNuYuijc1MtIPMM3RTc=
Subject key identifier: AE:4E:99:F8:90:09:B8:C0:5C:46:94:25:5E:84:04:70:BD:C0:CF:16
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 0194BB2900AF8F27FF2068EA67C5CE76E53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 0BF4
Signing time: Fri 31 Jan 2025 07:00:13 +0000
Manifest this update: Fri 31 Jan 2025 07:00:13 +0000
Manifest next update: Sat 01 Feb 2025 07:00:13 +0000
Files and hashes: 1: 0lerfjDbBomfVzh-fPpNdTuZC_w.roa (hash: K04vSVynMPGD818PT8TEi3joicn16R1AClxmk8kzM/M=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: xm0DMsa//n+S91XhMmrdHXA6PCuNjwZC67SeSh6vpHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:29:00:af:8f:27:ff:20:68:ea:67:c5:ce:76:e5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Jan 31 07:00:13 2025 GMT
Not After : Feb 1 07:00:13 2025 GMT
Subject: CN=ae4e99f89009b8c05c4694255e840470bdc0cf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:a4:cd:c1:24:d8:49:79:d3:35:36:b1:a0:
06:3e:bf:b5:2b:18:21:82:85:52:e2:ba:7d:dc:0f:
55:73:4e:46:5f:48:69:04:1b:c3:f9:b1:1c:c4:e2:
20:a2:c6:9d:7b:77:35:c7:55:97:44:17:24:f1:a4:
f2:42:bb:75:aa:01:93:b7:1f:ba:c7:a0:07:e1:cb:
46:03:0d:39:ea:4b:08:0e:27:ab:dd:ae:74:0c:ec:
89:9a:77:64:48:cb:9a:ed:43:5c:1e:1d:b4:06:16:
02:57:58:f9:6a:d0:33:24:dd:08:26:fa:51:fc:ea:
c6:62:1a:24:17:ee:54:5c:43:f9:67:0c:c7:5b:27:
11:56:eb:cc:5b:2c:66:5b:da:12:d1:cc:d6:f3:c1:
a6:56:10:0d:b4:81:3d:1d:84:19:36:8a:b7:ce:89:
a6:26:68:ed:0b:c6:e4:53:f8:50:f0:5e:b7:da:6e:
72:56:7a:8e:d8:21:ba:4f:9e:44:31:4c:d3:2d:cb:
37:ee:e0:ca:ef:dc:a4:18:ee:c8:11:c9:c6:30:35:
9d:d9:8d:11:db:40:42:b5:d8:31:1c:20:54:29:cb:
b2:ed:3f:26:ea:84:8f:5e:b0:5c:57:87:fe:a8:9d:
eb:99:d1:af:45:16:f7:97:68:05:62:50:f0:51:9c:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:99:F8:90:09:B8:C0:5C:46:94:25:5E:84:04:70:BD:C0:CF:16
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:11:f2:94:c3:df:b8:b7:0f:10:50:c1:d2:f9:ae:75:e3:38:
cd:33:f8:6c:72:0f:f0:3e:cb:eb:e6:b5:d6:98:24:fb:3f:f1:
91:90:bb:1f:b8:5f:8c:6d:1a:b5:98:a3:be:1d:20:3b:97:53:
ea:33:53:29:58:43:74:03:7d:27:48:1b:7b:9a:8e:cc:29:be:
2f:c4:c9:2c:95:c5:79:00:b9:65:c0:a3:21:b1:59:b1:ab:aa:
0c:50:cc:eb:e4:0e:9c:27:dd:4d:08:ab:23:e1:2f:af:94:da:
5a:ee:8a:52:d6:5b:a5:f8:96:63:18:82:60:e3:20:6a:e3:79:
8e:30:5a:79:2c:57:04:11:17:aa:f6:8f:d7:de:6d:2a:ab:d3:
d5:b4:e0:ec:34:9f:f6:e8:92:91:69:72:e8:7d:58:cf:58:38:
ac:5f:b2:77:1f:2f:3e:26:e4:67:92:51:dd:3f:3e:4a:b8:46:
bf:b1:ad:d5:26:44:22:40:1f:01:82:04:cb:1c:b7:3b:9b:76:
d1:c9:c0:45:97:d9:00:28:cc:92:ba:00:40:0b:38:a3:36:43:
e2:0a:8f:81:04:72:ba:b7:b0:1e:e5:32:b6:07:fa:30:6b:0d:
5e:47:da:be:92:38:37:c1:21:f1:aa:70:ab:6b:8b:21:8d:eb:
51:54:be:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:25 2025 by rpki-client on console-fra.rpki-client.org